--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-08T19:05:18Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-08T19:05:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-08T19:05:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-08T19:05:18Z" name: csr-cc78r resourceVersion: "5700" uid: 42a5f025-5118-4d89-b1c9-a467f4ee91a5 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=0f85ba1db00fdf695ff976c137c9e1842eaa5f7cc85efebbb50e4c4da6b43c4c groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-08T19:05:18Z" lastUpdateTime: "2026-07-08T19:05:18Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved